Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          N3qAD4+qIG++pEweINygRCHgk5CtFWTXV9N/ysXjZLc=
Subject key identifier:   B0:46:E2:0F:83:77:C3:F1:8B:01:4A:76:E0:E5:F0:8A:F3:76:E0:36
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       01A0D4CB7BE3C6FDBF883F997E7FFCFA7A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          15E5
Signing time:             Thu 24 Sep 2026 19:01:40 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:40 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:40 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: 7Gxm/XLM4ssg3YqURTIADxB32blzPtY9GgM07d/SBzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:7b:e3:c6:fd:bf:88:3f:99:7e:7f:fc:fa:7a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: Sep 24 19:01:40 2026 GMT
            Not After : Sep 25 19:01:40 2026 GMT
        Subject: CN=b046e20f8377c3f18b014a76e0e5f08af376e036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:70:ce:cf:e9:a0:bd:02:eb:fa:ba:a4:2f:26:
                    d4:6f:96:fd:79:36:a2:76:5c:2e:f6:eb:53:9e:c3:
                    49:32:3c:ae:4a:68:66:5e:d1:52:45:eb:5e:69:bc:
                    72:33:ca:e4:2c:78:69:c6:f3:7f:d4:d7:07:d2:a2:
                    71:ea:02:f5:38:77:3c:b5:cf:6c:e2:b4:03:1f:06:
                    63:25:cd:e6:0f:a4:db:98:6a:2b:72:89:5f:67:4b:
                    e3:f4:3b:e0:49:21:30:36:68:f3:bc:44:1c:a4:58:
                    70:7d:65:97:66:db:92:ac:ba:6f:a3:ce:29:40:b9:
                    37:54:4c:22:72:16:16:d6:82:39:c5:6d:6e:34:45:
                    be:93:a9:a0:32:10:8d:21:d0:89:f0:84:eb:2a:8b:
                    7e:fd:26:4c:06:89:a6:04:90:cb:05:4c:75:d7:14:
                    9d:df:b0:8a:86:3c:04:b7:7f:6b:4f:a5:71:74:8d:
                    ee:96:a1:c9:9f:9e:83:a5:da:f5:95:45:33:30:c5:
                    b1:1e:b0:39:07:7f:67:27:3f:78:67:ab:1a:82:73:
                    e2:c9:fa:bd:89:f5:d4:9d:d0:78:50:9f:1b:23:c0:
                    c9:fb:f8:e4:d6:b4:c8:a2:84:ea:08:69:58:c4:bc:
                    dd:5a:1b:29:1b:12:ff:70:e8:37:63:8b:cd:2a:fb:
                    94:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:46:E2:0F:83:77:C3:F1:8B:01:4A:76:E0:E5:F0:8A:F3:76:E0:36
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:57:01:a2:c5:57:b3:06:64:4f:32:f7:af:07:19:a9:24:df:
         ef:d4:a2:a4:67:eb:ed:58:44:1b:f9:bf:56:1d:bd:4f:41:16:
         14:6a:bc:6a:76:85:b2:3b:f5:d8:26:9c:74:86:3b:c4:42:b1:
         18:ea:e2:e4:85:a1:3b:59:d3:85:85:27:c8:cb:79:90:26:af:
         89:82:e3:21:c7:7c:c9:07:f0:06:0a:e7:53:1a:97:14:42:a5:
         e5:82:02:51:dc:7f:8b:a4:e7:ce:b8:68:c9:69:b7:a2:12:8f:
         0b:b0:6d:0a:96:dd:13:b8:f4:94:7e:68:c8:2c:35:c2:c9:7a:
         42:b9:25:ab:28:12:9d:a2:31:90:50:a0:57:e3:d1:b9:77:8c:
         c9:9b:bc:20:a5:c3:0a:91:72:0f:3d:21:6c:ca:8a:dc:15:10:
         d8:99:ff:04:85:1f:95:54:56:b6:a1:45:46:0e:c4:57:1e:90:
         2e:c3:fc:10:17:eb:46:ed:8c:ad:9f:a3:a5:ec:de:0b:fb:9d:
         4e:e0:e5:77:2f:0b:de:9f:11:b0:4d:8f:42:bb:03:82:09:4f:
         8b:27:c0:8b:1c:c2:b4:43:e1:a2:35:fe:b8:bf:6a:c8:e6:ef:
         d3:45:22:3e:3b:a9:50:71:16:d1:58:4b:f2:a2:4f:4a:ab:b6:
         58:fc:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:59:20 2026 by rpki-client